This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/SoDXNKbfOUPJ4YKy9iyY0KoufzI.roa File: SoDXNKbfOUPJ4YKy9iyY0KoufzI.roa (raw, json) Hash identifier: WbPlL3Yxq6eXsEddYg3YhRc2XGit0xjsSVrgQ+jHlI4= Subject key identifier: 4A:80:D7:34:A6:DF:39:43:C9:E1:82:B2:F6:2C:98:D0:AA:2E:7F:32 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019BE097E91BFF74B62342088FF2722E1035 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/SoDXNKbfOUPJ4YKy9iyY0KoufzI.roa Signing time: Wed 21 Jan 2026 12:46:50 +0000 ROA not before: Wed 21 Jan 2026 12:46:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204154 IP address blocks: 92.118.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:97:e9:1b:ff:74:b6:23:42:08:8f:f2:72:2e:10:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 21 12:46:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a80d734a6df3943c9e182b2f62c98d0aa2e7f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:06:5d:7e:3e:d7:38:c1:eb:92:4a:fe:65: 47:c2:6b:2d:c1:20:47:18:bc:0b:c3:1c:23:3b:20: 40:5e:18:6c:2c:6e:13:a6:16:6b:a6:24:b2:ba:bd: 0c:88:33:c4:d9:fd:bb:56:2c:c4:53:2b:43:24:7d: 8e:48:2c:96:3c:07:4f:fe:58:ba:a2:5f:f3:73:c2: 3e:17:07:18:73:3e:65:21:af:3d:a6:db:a7:30:d8: 0f:d9:d2:93:61:96:a1:3d:20:ff:42:9e:82:e8:97: ea:73:d4:d0:24:fc:4f:f5:99:bd:fb:94:fd:7b:77: 7f:e6:3a:99:8c:76:de:19:f2:e8:52:6d:d3:df:0c: a8:bd:3e:4e:c1:d8:85:a4:61:c7:58:85:d4:79:e6: 0a:b4:dc:67:bf:2d:e8:ed:8e:3f:6a:66:6c:1c:bc: c0:20:f4:10:cb:dd:b8:78:aa:06:07:b7:0d:18:c2: a8:d6:4e:14:f3:91:6e:7a:35:3d:12:04:75:8e:45: d5:e0:4f:ea:3b:b2:18:fb:42:d9:a0:be:5b:a7:21: 38:8d:65:5d:17:a4:e7:2f:af:3f:da:2b:8c:20:10: 9a:39:f6:d0:33:1f:97:c9:3d:23:40:3a:1c:9f:2c: 32:30:ae:2c:b8:eb:7f:8d:74:f1:79:7a:90:08:08: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:80:D7:34:A6:DF:39:43:C9:E1:82:B2:F6:2C:98:D0:AA:2E:7F:32 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/SoDXNKbfOUPJ4YKy9iyY0KoufzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.10.0/24 Signature Algorithm: sha256WithRSAEncryption ba:f9:97:24:06:b9:3a:a1:d3:a1:40:77:d6:87:82:d0:81:11: 6b:77:90:9f:aa:6a:0d:ec:f0:8b:67:64:1d:af:eb:28:45:dd: 21:47:26:b8:7a:97:ca:26:56:d6:6b:5b:75:65:4b:f2:b8:19: 4a:27:bc:44:bf:ab:66:26:43:b8:03:16:b4:55:b2:ec:61:22: f1:d9:76:37:78:43:73:d6:22:d8:8a:03:db:1e:f4:88:1f:1f: 70:2c:ca:cb:d4:f8:bc:e1:16:9b:2e:99:fb:ff:7d:aa:00:cd: 74:05:45:3b:65:59:f6:d7:c7:da:a8:9d:f7:85:70:31:c5:b4: ab:c7:91:03:07:da:cb:a8:c6:89:f0:fa:62:7a:95:d3:8c:f0: 2c:07:92:e2:e0:53:1a:ed:7e:e4:c0:62:ff:ab:92:84:6c:a5: 64:50:d5:97:9a:92:69:f4:0a:ad:16:81:9a:8d:d1:2b:a9:64: dd:dc:0f:4f:9f:36:de:37:13:a4:fa:2e:92:75:20:03:a4:6a: 06:a3:ad:75:cb:e1:53:12:6b:9c:4f:6c:69:b4:29:9a:16:32: ed:84:63:67:9a:30:32:9e:dd:d5:6e:bc:11:ae:2a:e1:8c:5b: 5c:0c:15:ce:55:f3:71:6b:30:0f:d4:bf:25:3c:5d:80:49:3d: 62:9c:de:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgl+kb/3S2I0IIj/JyLhA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTIxMTI0NjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTgwZDczNGE2ZGYzOTQzYzllMTgyYjJmNjJjOThkMGFhMmU3ZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptkGXX4+1zjB65JK/mVHwmstwSBH GLwLwxwjOyBAXhhsLG4TphZrpiSyur0MiDPE2f27VizEUytDJH2OSCyWPAdP/li6 ol/zc8I+FwcYcz5lIa89ptunMNgP2dKTYZahPSD/Qp6C6Jfqc9TQJPxP9Zm9+5T9 e3d/5jqZjHbeGfLoUm3T3wyovT5OwdiFpGHHWIXUeeYKtNxnvy3o7Y4/amZsHLzA IPQQy924eKoGB7cNGMKo1k4U85FuejU9EgR1jkXV4E/qO7IY+0LZoL5bpyE4jWVd F6TnL68/2iuMIBCaOfbQMx+XyT0jQDocnywyMK4suOt/jXTxeXqQCAggEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqA1zSm3zlDyeGCsvYsmNCqLn8yMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvU29EWE5LYmZPVVBKNFlLeTlpeVkwS291ZnpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHYKMA0G CSqGSIb3DQEBCwUAA4IBAQC6+ZckBrk6odOhQHfWh4LQgRFrd5CfqmoN7PCLZ2Qd r+soRd0hRya4epfKJlbWa1t1ZUvyuBlKJ7xEv6tmJkO4Axa0VbLsYSLx2XY3eENz 1iLYigPbHvSIHx9wLMrL1Pi84RabLpn7/32qAM10BUU7ZVn218faqJ33hXAxxbSr x5EDB9rLqMaJ8PpiepXTjPAsB5Li4FMa7X7kwGL/q5KEbKVkUNWXmpJp9AqtFoGa jdErqWTd3A9PnzbeNxOk+i6SdSADpGoGo611y+FTEmucT2xptCmaFjLthGNnmjAy nt3VbrwRrirhjFtcDBXOVfNxazAP1L8lPF2AST1inN6s -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:46 2026 by rpki-client